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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and wilt expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )[2 Responsive to communication(s) filed on 23 July 2004 . 
2a)D This action is FINAL. 2b)H This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-11 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) 13 Claim(s) 1-11 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152, 

Priority under 35 U.S.C. § 1 1 9 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Double Patenting 

A rejection based on double patenting of the "same invention" type finds its support in 
the language of 35 U.S. C. 101 which states that "whoever invents or discovers any new and 
useful process ... may obtain a patent therefor ..." (Emphasis added). Thus, the term "same 
invention," in this context, means an invention drawn to identical subject matter. See Miller v. 
Eagle Mfg. Co., 151 U.S. 186 (1894); In re Ockert, 245 F.2d467, 1 14 USPQ 330 (CCPA 1957); 
and In re Vogel, 422 R2d 438, 164 USPQ 619 (CCPA 1970). 

A statutory type (35 U.S. C. 101) double patenting rejection can be overcome by 
canceling or amending the conflicting claims so they are no longer coextensive in scope. The 
filing of a terminal disclaimer cannot overcome a double patenting rejection based upon 35 
U.S.C. 101. 

Claims 1-9 are rejected under 35 U.S.C. 101 as claiming the same invention as that of 
claims 1-9 of prior U.S. Patent No. 6, 279, 1 10. This is a double patenting rejection. 



The nonstatutory double patenting rejection is based on a judicially created doctrine 
grounded in public policy (a policy reflected in the statute) so as to prevent the unjustified or 
improper timewise extension of the "right to exclude" granted by a patent and to prevent possible 
harassment by multiple assignees. See In re Goodman, 1 1 F.3d 1046, 29 USPQ2d 2010 (Fed. 
Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 
F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 
1970);and, In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) may be used to 
overcome an actual or provisional rejection based on a nonstatutory double patenting ground 
provided the conflicting application or patent is shown to be commonly owned with this 
application. See 37 CFR 1. 130(b). 

Effective January 1 , 1 994, a registered attorney or agent of record may sign a terminal 
disclaimer. A terminal disclaimer signed by the assignee must fully comply with 37 
CFR 3.73(b). 

Claims 10-11 are rejected under the judicially created doctrine of obviousness-type 
double patenting as being unpatentable over claims 10-1 1 of U.S. Patent No. 6,279,1 10. 
Although the conflicting claims are not identical, they are not patentably distinct from each other 
because the application claims a means for generating (claim 10 lines 6-8), while the patent ' 1 10 
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discloses a generator (claim 10 lines 7-9). At the time the invention was made, it would have 
been obvious to a person of ordinary skill in the art to use a generator as disclosed in ' 1 10 as a 
means for generating. One of ordinary skill in the art would have been motivated to do this 
because this is the function of a generator. 

Claim Rejections - 35 USC § 112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

Claims 1 and 7 recite the limitation "said long term private key" in line 10 and 1 1 
respectively. There is insufficient antecedent basis for this limitation in the claim. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-11 are rejected under 35 U.S.C. 103(a) as being unpatentable over Sudia (5, 
825,880) in view of Koyama et al. 

In reference to claims 1, 7, and 10, Sudia discloses a signing system and method to affix 
a signature using multiple partial signatures (abstract) comprising steps of: generating a first 
short term private key; computing a first short term public key derived from said first short term 
private key (column 1 1 lines 1-5 in combination with column 1 1 lines 24-26). Sudia discloses 
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the calculation of several partial signatures (signature components) and finding the normal 
signature using the multiplicative properties of digital signatures (column 5 lines 1-37). Finally 
Sudia discloses a system that receives the signature and verifies said signature (column 3 lines 
21-30). 

However Sudia does not disclose computing the signature component using the public 

key. . 

Koyama teaches creating of a partial signature using the public key. Koyama further 
teaches combining partial signatures using homomorphism and a masked digital signature 
(section 7.4). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use homomorphism to calculate a digital signature as in Koyama in the system 
of Sudia. One of ordinary skill in the art would have been motivated to do this because 
calculating the digital signature as in Koyama uses elliptic curve, which provides method of 
calculating the digital signature in a method that is less computationally expensive and the 
algorithms are analogues to RSA algorithms. 

In reference to claim 2, wherein said first short term private key k is an integer and said 
first short term public key is derived by computing the value kP = (xl, yl) wherein P is a point 
of prime order n in E(Fq), wherein E is an elliptic curve defined over Fq. 

Sudia does not disclose a system that uses elliptic curve. 

Koyama discloses a system to compute signatures wherein private and public key are 
derived by computing the value kP = (xl, yl) wherein P is a point of prime order n in E(Fq), 
wherein E is an elliptic curve defined over Fq (section 3). 
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At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use homomorphism to calculate a digital signature as in Koyama in the system 
of Sudia. One of ordinary skill in the art would have been motivated to do this because 
calculating the digital signature as in Koyama uses elliptic curve, which provides method of 
calculating the digital signature in a method that is less computationally expensive and the 
algorithms are analogues to RSA algorithms. 

In reference to claim 3, wherein said first signature component r having a form defined 
by r = x (mod n) wherein x is derived by converting said coordinate xl to an integer x . 

Sudia does not disclose a system that uses elliptic curve. 

Koyama discloses a system wherein said first signature component r having a form 
defined by r = x (mod n) wherein x is derived by converting said coordinate xl to an integer x 
(section 2). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use homomorphism to calculate a digital signature as in Koyama in the system 
of Sudia. One of ordinary skill in the art would have been motivated to do this because 
calculating the digital signature as in Koyama uses elliptic curve, which provides method of 
calculating the digital signature in a method that is less computationally expensive and the 
algorithms are analogues to RSA algorithms. 

In reference to claim 4, wherein said second short term private key being an integer 
selected such that 2 <= t <= (n-2), and said second signature component being defined by 
s = t (e + dr)(mod n), wherein e is a hash of said message m 
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Sudia does not disclose a system that uses elliptic curve for calculating the second digital 
signature. 

Koyama discloses a system wherein the key is an integer selected such that 2 <= t <- (n- 
2), and said second signature component being defined by s = t (e + dr)(mod n), wherein e is a 
hash of said message m (section 7.4). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use homomorphism to calculate a digital signature as in Koyama in the system 
of Sudia. One of ordinary skill in the art would have been motivated to do this because 
calculating the digital signature as in Koyama uses elliptic curve, which provides method of 
calculating the digital signature in a method that is less computationally expensive and the 
algorithms are analogues to RSA algorithms. 

In reference to claim 5, wherein the third signature component being defined by c = tk 
(mod n) . 

Sudia does not disclose a system that uses elliptic curve for calculating the second digital 
signature. 

Koyama discloses a system wherein the signature components being defined by c = tk 
(mod n) (section 7.4). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use homomorphism to calculate a digital signature as in Koyama in the system 
of Sudia. One of ordinary skill in the art would have been motivated to do this because 
calculating the digital signature as in Koyama uses elliptic curve, which provides method of 
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calculating the digital signature in a method that is less computationally expensive and the 
algorithms are analogues to RSA algorithms. 

In reference to claims 6 and 11 wherein said normal signature component s being defined 
by s' = c _1 s mod n. 

Koyama discloses a system wherein said normal signature component s being defined by 
s' = c _1 s mod n (section 7.4). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use homomorphism to calculate a digital signature as in Koyama in the system 
of Sudia. One of ordinary skill in the art would have been motivated to do this because 
calculating the digital signature as in Koyama uses elliptic curve, which provides method of 
calculating the digital signature in a method that is less computationally expensive and the 
algorithms are analogues to RSA algorithms. 

In reference to claims 8-9 that includes the step of in said receiver computer system, 
using said second and third signature components (s, r) computing a normal signature component 
s\ and sending said signature components (s\ r) as a normal digital signature to a verifier 
computer system, and verifying said normal signature (s, r) by said verifier system (column 5 
lines 35-40). 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Demytko 5,627,893 
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Boneh 



Twenty Years of Attacks on the RSA Cryptosystem 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paula W Klimach whose telephone number is (571) 272-3854. 
The examiner can normally be reached on Mon to Thr 9:30 a.m to 5:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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